Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance Penetration Testing & Threat Intelligence: Enhancing Cybersecurity | Interview with Sasa Jusic
14 snips
Dec 30, 2025 Sasa Jusic, a board member at Infigo IS with extensive cybersecurity experience, dives into the intricacies of penetration testing and threat intelligence. He explains how these two elements complement each other, highlighting the interplay of offensive and defensive security strategies. Sasa discusses important frameworks like DORA and ISO 27001 and shares critical insights on effective pen test preparation and executing successful reporting. He emphasizes the necessity of collaboration across teams and offers practical advice for optimizing threat intelligence within organizations.
AI Snips
Chapters
Transcript
Episode notes
DORA Emphasizes Resilience Over Controls
- DORA reframes regulations around resilience, not just security controls.
- It merges IT operations and security testing into a single operational resilience concept.
Red Teaming Simulates Stealthy Objectives
- Red teaming targets specific high-value objectives and mimics stealthy adversaries.
- It differs from generic pen tests by requiring avoidance of detection and careful planning.
Act On Findings And Validate Fixes
- Prioritize remediation and track progress; follow-up testing validates fixes and ensures value.
- Assign responsibility and allocate resources so findings don't linger unread.